Horizontal scaling for a software defined wide area network (SD-WAN)

Abstract

Disclosed are systems, apparatuses, methods, and computer-readable media for managing networks. According to at least one example, a method is provided for connecting to a network controller across different regions. The method includes identifying a first connection with a network orchestrator during establishment of a second connection with the network orchestrator from a network controller; establishing a sibling session that links the second connection and the first connection at a control plane; inserting a sibling data message that identifies the sibling session into control messages sent; receiving a message from the network orchestrator over the second connection, the message including an address of the network controller associated with the second connection; and transmitting the second address of the network controller over the first connection to the network orchestrator.

What is claimed is: 
     
       1. A method, comprising:
 identifying a first connection with a network orchestrator during establishment of a second connection with the network orchestrator from a network controller; 
 establishing a sibling session that links the second connection and the first connection at a control plane; 
 inserting a sibling data message that identifies the sibling session into control messages sent; 
 receiving a message from the network orchestrator over the second connection, the message including an address of the network controller associated with the second connection; and 
 transmitting the second address of the network controller over the first connection to the network orchestrator, wherein the network orchestrator receives the second address of the network controller and associates the first connection and the second connection as a single logical connection, 
 wherein the network orchestrator is configured to transmit the first address and the second address during setup of network edge devices. 
 
     
     
       2. The method of  claim 1 , wherein the sibling session is identified based on identifying a universal unique identifier (UUID) of the network orchestrator. 
     
     
       3. The method of  claim 1 , wherein the network orchestrator receives the sibling data message and associates the first connection with the second connection. 
     
     
       4. The method of  claim 1 , wherein identification of the first connection occurs during a process challenge phase of a datagram transport layer security (DTLS) session initialization. 
     
     
       5. The method of  claim 1 , wherein the network orchestrator informs a network edge device of the second address of the network controller using a single connection. 
     
     
       6. The method of  claim 5 , wherein informing the network edge device of the second address of the network controller over the first connection precludes leakage of routes associated with network address translation. 
     
     
       7. The method of  claim 1 , wherein the network controller is located in a first region and the network orchestrator is located in a second region that is different from the first region. 
     
     
       8. The method of  claim 7 , wherein a network address translator converts IP addresses associated with the second region into IP addresses associated with the first region. 
     
     
       9. The method of  claim 1 , wherein the network controller is connected with a second network orchestrator is a different region. 
     
     
       10. The method of  claim 1 , wherein the first connection is an IPv4 connection and the second connection is an IPv6 connection, or wherein the first connection is an IPv6 connection and the second connection is an IPv4 connection. 
     
     
       11. A network controller comprising:
 a transceiver; 
 a processor configured to execute instructions and cause the processor to:
 identify a first connection with a network orchestrator during establishment of a second connection with the network orchestrator from the network controller, 
 establish a sibling session that links the second connection and the first connection at a control plane, 
 insert a sibling data message that identifies the sibling session into control messages, 
 receive a message from the network orchestrator over the second connection, the message including an address of the network controller associated with the second connection, 
 transmit the second address of the network controller over the first connection to the network orchestrator, wherein the network orchestrator receives the second address of the network controller and associates the first connection and the second connection as a single logical connection, and 
 wherein, the network orchestrator is configured to transmit the first address and the second address during setup of network edge devices. 
 
 
     
     
       12. The network controller of  claim 11 , the sibling session is identified based on identifying a universal unique identifier (UUID) of the network orchestrator. 
     
     
       13. The network controller of  claim 11 , the network orchestrator receives the sibling data message and associates the first connection with the second connection. 
     
     
       14. The network controller of  claim 11 , identification of the first connection occurs during a process challenge phase of a DTLS session initialization. 
     
     
       15. The network controller of  claim 11 , the network orchestrator informs a network edge device of the second address of the network controller using a single connection. 
     
     
       16. The network controller of  claim 15 , informing the network edge device of the second address of the network controller over the first connection precludes leakage of routes associated with network address translation. 
     
     
       17. The network controller of  claim 11 , the network controller is located in a first region and the network orchestrator is located in a second region that is different from the first region. 
     
     
       18. The network controller of  claim 17 , a network address translator converts IP addresses associated with the second region into IP addresses associated with the first region.